🔘Pynt for Azure DevOps Pipelines

Integrate Pynt with Azure DevOps for automated API security testing. Enhance your CI/CD pipeline by adding Pynt’s robust security scans to your Azure DevOps workflows.

What is Azure DevOps?

💡 Azure DevOps is a suite of development tools that provide CI/CD capabilities, version control, and project management. It supports building, testing, and deploying applications across cloud and on-premises environments.

Azure DevOps

---

Pynt integration with Azure DevOps

As part of its API security testing, Pynt allows seamless integration with Azure DevOps.

Pynt for Azure DevOps enables you to seamlessly integrate powerful API security testing into your Azure DevOps CI/CD pipelines. By incorporating Pynt into your Azure DevOps workflows, you can automate comprehensive security scans with every build, ensuring that your APIs are protected from vulnerabilities throughout the development process. Pynt’s integration with Azure DevOps is designed to be straightforward, allowing you to enhance your security posture without disrupting your existing CI/CD practices.

---

Azure DevOps Configuration

• Copy your Pynt ID into the pipeline variable and store it as a secret:

Storing Pynt ID

• Make sure Python installed on the agent.

• Add Pynt to your pipeline. See the following example of a job in an Azure pipeline that runs Pynt on our goat vulnerable application:

trigger:
- main

pool: 
  name: test

steps:
- script: python3 -m pip install --upgrade pyntcli
  displayName: 'Install pynt cli'

- script: curl https://raw.githubusercontent.com/pynt-io/pynt/main/goat_functional_tests/goat.postman_collection.json -o goat.json 
  displayName: 'Get goat collection'

- script: |
    export PYNT_ID = $(PYNT_ID)
    pynt newman --collection goat.json --reporters --severity-level critical
  displayName: 'Run pynt with newman integration '

Pynt command not found

If you get pynt command not found error it means that pip install folder is not in your path. add the following to the last step:

- script: |
    export PYNT_ID = $(PYNT_ID)
    
    # Get the user base bin directory
    BIN_PATH=$(python -m site --user-base)/bin
      
    # Add it to the PATH
    export PATH=$BIN_PATH:$PATH
      
    # Verify that it's been added
    echo "Updated PATH: $PATH"
    
    pynt newman --collection goat.json --reporters --severity-level critical
  displayName: 'Run pynt with newman integration '

---

Controlling the return code from Pynt

pynt newman and pynt command have an optional flag --severity-level

With this flag, you have granular control over whether Pynt returns an error code (non zero) in the event of findings. Use this flag to control when Pynt will break the CI/CD run, allowed values are:

'all', 'medium', 'high', 'critical', 'none' (default) 

---

💡 Need Help? For any questions or troubleshooting, reach out to the Pynt Community Support.